Isaca IT-RISK-FUNDAMENTALS Online Practice Questions and Exam Preparation

Isaca IT-RISK-FUNDAMENTALS Online Questions & Answers

• Question 61:

  Which of the following is the MOST important information for determining the critical path of a project?

  A. Regulatory requirements
  B. Cost-benefit analysis
  C. Specified end dates
  C. Specified end dates

• Question 62:

  An enterprise has initiated a project to implement a risk-mitigating control. Which of the following would provide senior management with the MOST useful information on the project's status?

  A. Risk register
  B. Risk heat map
  C. Risk report
  C. Risk report

• Question 63:

  The MOST important reason to monitor implemented controls is to ensure the controls:

  A. are effective and manage risk to the desired level.
  B. enable IT operations to meet agreed service levels.
  C. mitigate risk associated with regulatory noncompliance.
  A. are effective and manage risk to the desired level.

• Question 64:

  Which of the following presents the GREATEST risk for the continued existence of an enterprise?

  A. When its risk appetite and tolerance are reviewed annually
  B. When its actual risk eventually exceeds organizational risk appetite
  C. When its risk appetite and actual risk exceed its risk capacity
  C. When its risk appetite and actual risk exceed its risk capacity

• Question 65:

  Which of the following is the MOST important factor to consider when developing effective risk scenarios?

  A. Risk events that affect both financial and strategic objectives
  B. Previously materialized risk events impacting competitors
  C. Real and relevant potential risk events
  C. Real and relevant potential risk events

• Question 66:

  Which of the following MUST be established in order to manage landT-related risk throughout the enterprise?

  A. An enterprise risk governance committee
  B. The enterprise risk universe
  C. Industry best practices for risk management
  A. An enterprise risk governance committee

• Question 67:

  Key risk indicators (KRIs) are metrics designed to:

  A. alert there is an increased chance of exceeding risk appetite.
  B. be a direct measure of risk for each business line.
  C. measure current risk levels in comparison to past levels.
  A. alert there is an increased chance of exceeding risk appetite.

• Question 68:

  Which of the following is the MAIN objective of governance?

  A. Creating controls throughout the entire organization
  B. Creating risk awareness at all levels of the organization
  C. Creating value through investments for the organization
  C. Creating value through investments for the organization

• Question 69:

  Which of the following is a benefit of using a top-down approach when developing risk scenarios?

  A. Focus at the enterprise level makes it easier to achieve management support.
  B. The development process is simplified because it includes only IandT-related events.
  C. Identification and assignment of risk ownership for mitigation plans can be done more quickly.
  A. Focus at the enterprise level makes it easier to achieve management support.

• Question 70:

  Risk maps can help to develop common profiles in order to identify which of the following?

  A. Risk that has clearly identified and assigned ownership
  B. Risk remediation activities that have sufficient budget
  C. Risk response activities that can be made more efficient
  C. Risk response activities that can be made more efficient